XWorm V6[.]0[.]7z | Triage™

XWorm V6.0.7z

SHA256 0c0fe862fcc63516531e2642fe2bc0792d0322f72724f8d667b89c56f546450e
MD5 41484b3861d3134e93de13f9aaaacfa4
SHA1 b4b707ef3aff4361aba77f2f9b42f964baa23dee
SHA512 3736ad25d22b8222a54f541d9d5c89403ebff6af7a317c14959bc1e42a37bb024169c5844c32044c4972aad6268fda3234ca2c5043feb0d04deeea3cf809fb7f
SSDEEP 393216:WVA0gfXIpZQUffpTX59B6vjq97oeGJ6lKFup2P3+Qvrp6ew:WS+ZQkpT/BYjq97oeGtQU3+QvFNw
TLSH
T11EF63338A4D76361DBC8F9D0500D08CBFF4E8D59B611B27C065A6B5D0CFC89196AE8EB
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Background.png

SHA256 2f691caff7e1980cfb069d2608b6470b3a06cdb90467ce47820e8602115a0c5b
MD5 c93ee3abeff4ac24936471f80b36ec7a
SHA1 0120649571a4b692ff5d10aae8dd87dffd3a0f81
SHA512 dd319d1eea708284588ff67268cb23bd7b5cde505f3a8a1e7a27a587920ee5877efa4c1d8264cae48de343cabbf11bbe457b49f348b46288765eeff45d20cab5
SSDEEP 24576:raWlRrTw9AK8jrGL+sUGBcD1MoEX1r/HXKIIfnbY:r/3w/8jzG+OomB/HXKa
TLSH
T1041523D6478670A5AECAC71881C71F777696DFA0AE64436DA6031BCCC3C0D525CE2BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

XWorm V6.0/Fixer V6.bat

SHA256 a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
MD5 2dabc46ce85aaff29f22cd74ec074f86
SHA1 208ae3e48d67b94cc8be7bbfd9341d373fa8a730
SHA512 6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3
TLSH
T10DB02B177482E290838004430271224D39FDA002C291F2C375224530CD84CF0C333795
MD5 SHA1 SHA512 TLSH

XWorm V6.0/GeoIP.dat

SHA256 bc07ff22d4ee0b6fafcc12482ecf2981c172a672194c647cedf9b4d215ad9740
MD5 8ef41798df108ce9bd41382c9721b1c9
SHA1 1e6227635a12039f4d380531b032bf773f0e6de0
SHA512 4c62af04d4a141b94eb3e1b0dbf3669cb53fe9b942072ed7bea6a848d87d8994cff5a5f639ab70f424eb79a4b7adabdde4da6d2f02f995bd8d55db23ce99f01b
SSDEEP 24576:0L/59ah0USm3uwl00odi9AnW1fUmdbxv6bA3wOzRAc3InsZLONMrZb:+/59a6USdi9Ues6bV6boLO6rZ
TLSH
T10C457B47FF0A85DB5845B91EF9019EDC5810EE76BD0A1335226E37ACA0B8360ECD71A7
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (1).ico

SHA256 115f0db669b624d0a7782a7cfaf6e7c17282d88de3a287855dbd6fe0f8551a8f
MD5 4f409511e9f93f175cd18187379e94cb
SHA1 598893866d60cd3a070279cc80fda49ee8c06c9b
SHA512 0d1f50243a3959968174aa3fd8f1a163946e9f7e743cbb2c9ef2492073f20da97949bf7d02c229096b97482ff725c08406e2e9aa72c820489535758470cf604f
SSDEEP 1536:RBrn6a7/Zu/M615kfNOfEK3EpQkGhD94TtcmeVQU71qiLSeznFkKeUqvllR/t6c1:RBz65/M6If+3Js+3JFkKeTn1
TLSH
T1DFA39283B511D2E1E5308A33E15BE9F10F227C5EEB5A281B7684FF173873151AE2791A
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (10).ico

SHA256 7a97547954aaad629b0563cc78bca75e3339e8408b70da2ed67fa73b4935d878
MD5 ad1740cb3317527aa1acae6e7440311e
SHA1 7a0f8669ed1950db65632b01c489ed4d9aba434e
SHA512 eee7807b78d4dd27b51cee07a6567e0d022180e007e1241266f4c53f1192c389be97332fcd9f0b8fda50627b40b8cf53027872304a68a210f4d754aa0243b0c2
SSDEEP 768:VDRRKECMsn3H2GkmPe3KUDlGEJ57ukb8rJXAtnvWrpLDvZ8EZN:tjls3WGkoe6Uso9T8r9AtnertLFN
TLSH
T1B9C31747A1281C21DBB0EE39A2DCC8BB594F5E79F1A6464C7CB5FC6864F68F1053AC06
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (11).ico

SHA256 3b64b79e4092251ebf090164cd2c4815390f34849bbd76fb51085b6a13301b6d
MD5 1c2cea154deedc5a39daec2f1dadf991
SHA1 6b130d79f314fa9e4015758dea5f331bbe1e8997
SHA512 dceebc1e6fdfe67afebaef1aff11dd23eda6fae79eb6b222de16edebdfebd8e45de896e501608254fb041824080cb41c81ac972032638407efc6bfeb930bfd00
SSDEEP 96:hc4i1w+DSf0RxO/Csg9nL2CupMqM4pSg36IfgT9A+QdwhFKQfkIvxIm3sW88H:qa+DSf0RxOQnLjoSg3hfG5/X8cOO88H
TLSH
T122123AC826B0CF07E6591B36C8B27FB5142D4DD0DAAA262B94CCFF4471A0FF87585994
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (12).ico

SHA256 84b48ca52dfcd7c74171cf291d2ef1247c3c7591a56b538083834d82857fee50
MD5 4ea9ab789f5ae96766e3f64c8a4e2480
SHA1 423cb762ce81fab3b2b4c9066fe6ea197d691770
SHA512 f917059b6f85e4a25909a27cad38b1ef0659161c32df54860226ff3d858127d8da592ea9072ad41d5a9986dd8c04a37e9ad34e2251883a8c2f0933e6aa201414
SSDEEP 192:8mEKEEjOjzSId77Fe0ggzSXlYtAMXa77gieRHw9S1IId:HUNdsgzS1EAEaHB8IId
TLSH
T13312C764B449D511C83A4139CC2BC9AD03250EF5C5340C1BA89AFF6736DBAC5131B56E
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (13).ico

SHA256 2e2f17b7dd15007192e7cbbd0019355f8be58068dc5042323123724b99ae4b44
MD5 e6fec4185b607e01a938fa405e0a6c6c
SHA1 565e72809586e46700b74931e490e2dc1e7e3db1
SHA512 13daeb2bf124e573590359f18a1d962157dc635a88319c9ed1a2e8ccad6322fb081579e1e8fbe62ffe55c8286c2bc8acb251d572a4beb00641ad5009a380e513
SSDEEP 384:AyIh9xb9bexqcmOg1/JuiiiiiilllllioiiiilllliiiiiuGxbu:9Ih9Z91hJy
TLSH
T1B674056F7E12B9BAC77856BF0810B18D59586C2696DCF103791FFB2CAC3DD076A09242
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (14).ico

SHA256 8fc693238afc49a8098dac1762bfae891e818bb84749c6eef5f1b0c6c8ffddb2
MD5 0c24edec606abda7c6570b7dcf439298
SHA1 4478a102892e5eb4bb1da8e9c62d17724965691a
SHA512 f8de3ffb8f9fe1394b3626ae5616213d4612b43f0635fa9053d74ac6fe536657e796289487f245b8abff74f1de8368c0df8e56bf21f540366ed86a378649ea24
SSDEEP 384:FY9tDXICTUj6Q+CUsn2JiAAA/////////A+AA////////AAAiA////kujYYFsG3I:+PMXT0
TLSH
T13574D45560B2F99CE512CAF714F0D5005DF2AC68AE6CA65EB9317FBE4E7708230867B0
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (15).ico

SHA256 b2f57a23ecc789c1bbf6037ac0825bf98babc7bf0c5d438af5e2767a27a79188
MD5 e3143e8c70427a56dac73a808cba0c79
SHA1 63556c7ad9e778d5bd9092f834b5cc751e419d16
SHA512 74e0f4b55625df86a87b9315e4007be8e05bbecca4346a6ea06ef5b1528acb5a8bb636ef3e599a3820dbddcf69563a0a22e2c1062c965544fd75ec96fd9803fc
SSDEEP 768:0nnnnnnnnnnnnnnnnnnnnnnnQInU2/gohN/yRUZZZZZZZZZZZaaa0KaaILjeuFgZ:Rkccckccccct
TLSH
T18E74051CB53AFC87E85A9E727E42E77588BE2C135F608841F604FFBE9639505A3D8811
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (16).ico

SHA256 3f3c5ce486e5b9fa88dc60b60916053e8808c69167df1a11287fd3cd6db1ca6e
MD5 14465d8d0f4688a4366c3bf163ba0a17
SHA1 9f1fa68a285db742e4834f7d670cae415ce6b3b6
SHA512 01db4fac75136baf9c162265785877b21fba9c4b8d9dbe4e495191f15aa9c914e3d5baf1c4606041279a7138c7e5c8f4ccf6e64689354fc3fb3fa66ab3b1da2d
SSDEEP 768:5As1Fd6jrW6QKysmsolxc4nvPQIfjRuw+mqbz9j1MWLQes2aXS5Cjr:5AMwflmsolaTIrRuw+mqbz9j1MWLQs2
TLSH
T15DA3D2F1A740C465D8A796B9883BDAA7A423A24DDC6C490D3D92FF0B7D723474027C9B
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (17).ico

SHA256 12f600b09c0db00877684a950fc14936ecc28df8f0ddc6821d68e4b82077ad92
MD5 167425a3fa7114b1800aa903adc35b2a
SHA1 601e8bd872ea31aff03721a0361e65a57b299cad
SHA512 586ce1360eb06f1df8e95ad178abfae7c9d41cba1be55276b3d3947d0504ca09185e543b7dbf1ba72dde4942ff626859a6d2e8a1faaaf6c5daaebd8740dcf538
SSDEEP 384:keGRHCUZYDikdQarfw8lGqMtxoYDQqrp0KR1QCOICdu2kkyPgE+zi/hScVsUIGVN:8fY/lVoTlR1vCU/he6H
TLSH
T10163C4D2F200C5A8FC398B75D53B4A7411137CBEDDB4A56F78887E2236B72A2402B957
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (2).ico

SHA256 142b529799268a753f5214265c53a26a7a6f8833b31640c90a69a4ff94cee5ec
MD5 f1463f4e1a6ef6cc6e290d46830d2da1
SHA1 bda0d74a53c3f7aaf0da0f375d0c1b5aca2a7aaf
SHA512 0fa93d009cc2f007d19e6fdda7ebe44c7ed77f30b49a6ef65c319133c0570ab84f2d86e8282b5069d7f2e238547722ac3966d2fa2fae4504133f0001a0387ae2
SSDEEP 1536:WE4NpLpq8Bb7RFRz8nqF+o2Hc0cccwccyccxcccMcccNmccdccccTccccncccNJ+:j4NpVq8BxFRzaqF+o2GQJ7/JzqVfGv2
TLSH
T186B30F6A8EEBB642C5425474797363814A3D1F78A4CE35518EF33FED5AF3CA521230A2
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (3).ico

SHA256 b2f7fb22cd5b935cf19a2f58f7fef9db99db40772ff4bb331a73c345161c2574
MD5 a512719efc9e6ecc5e2375abceb1669a
SHA1 51fae98edfab7cd6b6baac6df5ecbda082eeb1db
SHA512 e0153dbc8f3fdda8d1a7082bc30a3895d7f4b3bc2982b4b4ece55653d1b4c293eba3ba6d4a0a581f0f7db95ab287d6616ef7bf03af4485904111798bf9d9e625
SSDEEP 1536:Ms6se7llqn17KineXd2wwKtivEYoNRh8RX9EIKhI49NT:MsgbcUieNJHKoPC5+Ld
TLSH
T1C5D36CFF29A9491FC2052D78C249F735044EFD6278C6CA03B5A57E9FF23996A1C20993
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (4).ico

SHA256 5bb21d6c04ed64a1368dace8f44aff855860e69f235492a5dc8b642a9ea88e41
MD5 9c053bef57c4a7b575a0726af0e26dae
SHA1 47148d30bc9a6120a1d92617bf1f3e1ba6ca1a2c
SHA512 482d639ba60f57827d8a343f807f4f914289c45643307efaa666b584a085fe01ac7892252f41b7756fde93d215b4f3fed16e608bc45102d320d77239fa93146a
SSDEEP 1536:zVRUhw3TWxcZss+SP21wH7QOK/PPLr8zdYpizfgMRHGuTRLJHPxDsPsx3CXhRcVN:ZRUGKXs+S++7KFSbxeY+qDDrMY
TLSH
T1BAC32C2D5E4BB8DBE42449B558A6EBD10A6CEFA4F4E1169834E8FE3CB7D1474C500F90
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (5).ico

SHA256 45c85bdaaf0e0c30678d8d77e2585871ea6d1298ee0d30037745bacea6338484
MD5 9dbdd6972e129d31568661a89c81d8f9
SHA1 747399af62062598120214cef29761c367cfd28a
SHA512 e52572de3f0d57d24a24d65eca4ff638890ccc9c5aca3f213ff885eda3c40de115849eb64c341f557d601f566ce21f8fc0df25cc4b13aaad5e941449a6b7f87d
SSDEEP 192:sVLDqC6ot/2AlVx1qa6mgIwEk4w00wILxuudXCnadwyHXZ:EH/6A/9d1qDIwEk4w00wsuuXdwyHJ
TLSH
T112A379CB6E1486B7CB4CF63054A7B33C032BA83D6BD38E0EE55B3E59AB3265C9945105
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (6).ico

SHA256 6ea04cf08751a2f6bb2f0e994258a44d5183b6cdb1471a0ee285659eada045b5
MD5 d7c9666d30936e29ce156a2e04807863
SHA1 845e805d55156372232e0110e5dc80380e2cb1e5
SHA512 3cfd7a41f65c5a0dc23a90c6af358179efb3ae771f50534c3d76c486fe2d432ea3128a46b4b367c4714e86e8c0862a7385bd80662fe6ea82d7048f453570ed56
SSDEEP 768:LZe7enyslZ87gUcXmEHNBFNJC5jWb2NM2:Npysa7iAM2
TLSH
T1E1B3EEA41820C65DD5C4A776CD17B37D37882E5C14319B8A9270B8EEB23710D297EAFE
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (7).ico

SHA256 29d38c75af79aa0554f34cdfecb311f88f8dd02b02facaa299b9700841806ab8
MD5 7891c91d1761dc8a8846d362e6e31869
SHA1 0229bb01b7b4a0fca305eb521ec5dfbaa53674ea
SHA512 ed14614a706da985566853dc13df0d1128a718f39ec9957320813803fe07e59de337d51033970e2f57d9f56da3546c506f5f0f3becfa91ce741576855be14ba7
SSDEEP 3072:Y8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLn+:YUhcX7elbKTua9bfF/H9d9n+
TLSH
T1A6F3BF6D2E55CD46E9854C7544B7D3BCE66C4DB32E4C8912E72C7EA41B3AE483E22323
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (8).ico

SHA256 a65cbbdc2ca671a9edd7edac0c6737b3b116e357727e003e5fdeff163c6c21ab
MD5 af1739a9b1a1bf72e7072ad9551c6eea
SHA1 8da0a34c3a8040c4b7c67d7143c853c71b3d208d
SHA512 eeeac307371c38b75e256083c55a3fe4ab096c1c7520a4b7acb40fad3af5a0d6c88aaf85f2c3e418034abee422c2a3ba13731adf7ee6078016da4dd2e989b120
SSDEEP 768:ygjWAisCkoAbhMDB8dfO944J+IiIxzAILEhmtkW9iVHD:yOybBYfOS4J+1oEhyiHD
TLSH
T168B3A69A1D055BF7E70CF43480F3732D637ECE3A3E961E4DE9AE7EA862708491598811
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Icons/icon (9).ico

SHA256 bd1c33a67244801e828035904882ec53bd2ea8a1db9265a06d1aa08cf444ca80
MD5 3e24e40b41ecc59750c9231d8f8da40b
SHA1 91a701cf25aea2984f75846b6c83865d668ccad6
SHA512 fe62edddb62dd4b695f1ef40ffb7a0119d480d1c176f0254acee19a45d6433ef6c308acbe567c721018390626c71f7a0f7bcd195d59d54c19cf019f13c4f7572
SSDEEP 3072:HAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ+ZZZZZZZZZZZZZZZZZZZZZZvZZZ+:H+GIIIIIIIhIIIIIIIIIIIIIIIUP
TLSH
T13344EE606A050EBCEFE0BA78EBDD536513A52E91017B54CF13D03F8A3537E53BA9A052
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Logs/ErrorLogs.txt

SHA256 743eb11360b0e033025f9de4a56ae0fd2d54286fb1492b568db0ed98c8f6f994
MD5 96fbc4c54b244276503ca8914a758a3c
SHA1 5752549a38d68710eb0aaf6ca76b51e3bd0fd2b1
SHA512 fceb65b49d045982eb21f48dacddb9c7a23d77988a8c4282c6cf2a42474f32c84971bad1037b369a8dbd9729add58dfc9da10b932b426b4c4a384523586edc28
TLSH
T1B0F02E3C04A49035B117A66873685970823D603E51D786992D7FA21837C6E36C13E93D
MD5 SHA1 SHA512 TLSH

XWorm V6.0/Newtonsoft.Json.xml

SHA256 79ee87d4ede8783461de05b93379d576f6e8575d4ab49359f15897a854b643c4
MD5 d398ffe9fdac6a53a8d8bb26f29bbb3c
SHA1 bffceebb85ca40809e8bcf5941571858e0e0cb31
SHA512 7db8aac5ff9b7a202a00d8acebce85df14a7af76b72480921c96b6e01707416596721afa1fa1a9a0563bf528df3436155abc15687b1fee282f30ddcc0ddb9db7
SSDEEP 6144:XqqU+k/Rik5aG0rH3jGHdl0/IdHXpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DU1
TLSH
T155E4E02577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA252FB6A5
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Sounds/Chat.wav

SHA256 45f4136e58a5f749d125d2ab54308f81954d2c5b364b66013660a6c358845d1e
MD5 832a3652fd780edcdb2439ec33532c0d
SHA1 f0754ee6519d77700f5ee5b744b8c99386d7b577
SHA512 3b3b55afcdfa00d9b7085b20ed52a7b4d8b7d403f5d0d1c539781db1a20257efd8c856e19b8f32ea33766a580690b498ff063849519691a9a4cbbcd3e9447cd4
SSDEEP 768:QVPqefmaP5C3KduJn13jSHYHzIcr6DPW75Pvi3Fy5NQbIbhuJLA+LhDclY3Rp6:yP1mU5GlJnBS4TIQ6o163ofQ8b4Pfm
TLSH
T1B9235CD0E142DE00C4829D6ECE16E5E047337A95EF4B67173004BF6A39E35C2AA6E7D9
MD5 SHA1 SHA512 SSDEEP TLSH

XWorm V6.0/Sounds/Intro.wav

SHA256 e3e5029bf5f29fa32d2f6cdda35697cd8e6035d5c78615f64d0b305d1bd926cf
MD5 ad3b4fae17bcabc254df49f5e76b87a6
SHA1 1683ff029eebaffdc7a4827827da7bb361c8747e
SHA512 3d6ecc9040b5079402229c214cb5f9354315131a630c43d1da95248edc1b97627fb9ba032d006380a67409619763fb91976295f8d22ca91894c88f38bb610cd3
SSDEEP 3072:FU3hYG9X9JzhaLL5+QYKHZDa6D+4LT92KEpcP+b8FGUt0Ybs5e9jXjubLtNmBNs9:GjVsLL5lva6D+4P9llWvaGe9CHeBNm
TLSH
T177347CD2E104A690D83989329D1669954B233AEFFF8A33353084F73674E3442DB6D6DB
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

XWorm V6.0.7z

XWorm V6.0/Background.png

XWorm V6.0/Fixer V6.bat

XWorm V6.0/GeoIP.dat

XWorm V6.0/Icons/icon (1).ico

XWorm V6.0/Icons/icon (10).ico

XWorm V6.0/Icons/icon (11).ico

XWorm V6.0/Icons/icon (12).ico

XWorm V6.0/Icons/icon (13).ico

XWorm V6.0/Icons/icon (14).ico

XWorm V6.0/Icons/icon (15).ico

XWorm V6.0/Icons/icon (16).ico

XWorm V6.0/Icons/icon (17).ico

XWorm V6.0/Icons/icon (2).ico

XWorm V6.0/Icons/icon (3).ico

XWorm V6.0/Icons/icon (4).ico

XWorm V6.0/Icons/icon (5).ico

XWorm V6.0/Icons/icon (6).ico

XWorm V6.0/Icons/icon (7).ico

XWorm V6.0/Icons/icon (8).ico

XWorm V6.0/Icons/icon (9).ico

XWorm V6.0/Logs/ErrorLogs.txt

XWorm V6.0/Newtonsoft.Json.xml

XWorm V6.0/Sounds/Chat.wav

XWorm V6.0/Sounds/Intro.wav